Tracking users across browsers

Thursday, 6 December 2007

Thom Shannon has released an interesting bit of Flash/JS code which enables a site to track users across browsers. It only works on Windows at the moment and uses Flash local storage to retain the information. I think this could be great for tracking malicious TOR users or attackers behind proxies. The example along with source code can be viewed here:-

Cross cookie example

Great work Thom!

The entry 'Tracking users across browsers' was posted on December 6th, 2007 at 12:54 pm and is filed under Security. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.

4 Responses to “Tracking users across browsers”

  1. pdp writes:
    No. 1 — December 6th, 2007 at 2:22 pm

    I don’t like not being able to see the Flash object sources :) so, here I coded it for you!

    import flash.external.ExternalInterface;

class FlashCookieManager {
	public function FlashCookieManager() {
		ExternalInterface.addCallback("get", this, get);
		ExternalInterface.addCallback("set", this, set);
		ExternalInterface.addCallback("cls", this, cls);
	}

	public function get(name, path, secure) {
		var s = SharedObject.getLocal(name, path, secure);
		var v = s.data.value;

		s.close();

		return v;
	}

	public function set(data, name, path, secure) {
		var s = SharedObject.getLocal(name, path, secure);
		s.data.value = data;

		s.flush();
		s.close();
	}

	public function cls(name, path, secure) {
		var s = SharedObject.getLocal(name, path, secure);

		s.clear();
		s.flush();
		s.close();
	}
}
  2. Gareth Heyes writes:
    No. 2 — December 6th, 2007 at 2:38 pm

    Hehe thanks :) I didn’t know about the SharedObject in Flash.

  3. pdp writes:
    No. 3 — December 6th, 2007 at 2:48 pm

    and here is the link that explains how to compile it:

    http://www.gnucitizen.org/blog/flash-cookie-object-tracking/

    cheers,
    pdp

  4. adam writes:
    No. 4 — December 12th, 2007 at 7:15 am

    Cool! I test it on FF and opera ^_^!

«
»